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IN THE SPECIFICATION 

Please amend the paragraph at page 2, lines 4-9 as follows: 
The present invention was made in consideration of such a 
circumstance, as set forth above . A an object of the present 
invention is to provide a data processing method enabling to 
make encrypted data provided following the authentication not to 
be deciphered even when key data of the authentication is 
obtained illegitimately by a third party. 

Please amend the paragraph beginning at page 2, line 10 and 
concluding on page 3, line 10 as follows: 

To attain the above object, a data processing method of a 
first invention is A data processing method performed by a first 
processing device and a second processing device when the first 
data processing device holds first authentication key data and 
encryption key data and the second data processing device holds 
second authentication data corresponding to the first 
authentication data and decryption key data corresponding to the 
encryption data, and it has a first step by which the first data 
processing device uses the first authentication key data and the 
second processing device uses the second authentication key 
data, and authentication is performed between the first data 
processing device and the second data processing device^— a 
second step by which when the second data processing device 
verifies the first data processing device by the authentication 
in the first step, the first processing device uses the 
encryption key data for encryption and decrypts encrypted data 
provided to the second data processing device by using the 
decryption key dataj_— and a third step by which when the second 
data processing device judges that decryption data obtained by 
the decryption in the second step is decrypted adequately, the 
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second data processing device uses the decryption data as the 
data is effective. 

Please amend the paragraph at page 4, lines 1-4 as follows: 
Then, in a third step, when the second data processing 
device judges that decryption data obtained by the decryption in 
the second step is decrypted adequately, the decrypted data is 
used as it is effective. 

Please amend the paragraph beginning at page 4, line 17 and 
concluding on page 5, line 13 as follows: 

Further, in the data processing method of . the first 
invention, preferably, when the first authentication key data is 
generated by a predetermined generation method by using 
predetermined key data, the first step has a fourth step by 
which the first data processing device provides key designation 
data designating key data used for generation of the first 
authentication key data to the second data processing device-? — j_ 
a fifth step by which the second data processing device 
generates the second authentication key data by a predetermined 
generation method by using the key data designated by the key 
designation data received —in the fourth step-? — ; a sixth step by 
which the first data processing device uses the first 
authentication key data and uses the second authentication key 
data generated by the second data processing device in the fifth 
step to perform the authentication-; — ; and a seventh step by 
which when the second data processing device judges that the 
first authentication data and the second authentication data are 
the same, the first data processing device is verified. 

Please amend the paragraph at page 15, lines 21-23 as 
follows : 

3 



Application No.: 10/527,651 



Docket No.: SONYJP 3.3-328 



Processing shown as following^ is performed depending on 
execution of the program 323 by the CPU 314 and execution of the 
program 34 3 by the CPU 3 34. 

Please amend the paragraph at page 16, lines 8-14 as 
follows : 

At this time, the authentication units 311 and 331 usee the 
first authentication key data 321 and 341 and perform encryption 
respectively and decryption of predetermined data based on a 
first encryption algorithm and a first decryption algorithm 
corresponding to the first encryption algorithm, and the 
authentication is performed. 

Please amend the paragraph at page 28, lines 10-14 as 
follows : 

Here, in the AP layer, the application programs AP_1, AP_2 , 
and AP_3 prescribing procedures by the service businesses 16-5_1, 
16€_2, and 16-&_3 such as the credit card company shown in FIG. 5 
using the IC cards 3 are read out from the external memory 7 and 
run. 
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